skills/devstefancho/skills/setup-notification/Snyk

setup-notification

Warn

Audited by Snyk on Aug 21, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). Source file scripts/stop-speak.sh and scripts/notification-hook.sh read hook stdin JSON (input=$(cat)), then interpolate attacker-controlled fields like .cwd, .notification_type, etc. into subsequent osascript dialog text at runtime.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 21, 2026, 03:42 AM

Issues

1